#41 Transparent Ethernet Bridging (Protocol 0x6558) Ignored

[Leo Brown]

Great tool - thank you.
VMWare does port mirroring via a kind of GRE which when unpacked in Linux creates a Linux 'Cooked' pcap with protocol type 0x6558 (Transparent Ethernet Bridging) followed by an Ethernet header.

Are you able to see how this might be resolved? I understand the packet structures but don't quite follow the code.

The next protocol in the image below is IPv4.